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Abstract 

Mechanism design is addressed in the context of fair allocations of indivisible goods with 
monetary compensation. Motivated by a real-world social choice problem, mechanisms with 
verification are considered in a setting where (i) agents' declarations on allocated goods 
can be fully verified before payments are performed, and where (ii) verification is not 
used to punish agents whose declarations resulted in incorrect ones. Within this setting, 
a mechanism is designed that is shown to be truthful, efficient, and budget-balanced, and 
where agents' utilities are fairly determined by the Shapley value of suitable coalitional 
games. The proposed mechanism is however shown to be #P-complete. Thus, to deal 
with applications with many agents involved, two polynomial-time randomized variants are 
also proposed: one that is still truthful and efficient, and which is approximately budget- 
balanced with high probability, and another one that is truthful in expectation, while still 
budget-balanced and efficient. 



1. Introduction 

Whenever the outcome of some social choice process depends on the information collected 
from a number of self-interested agents, strategic issues may come into play. Indeed, agents 
may find convenient to misreport their types, i.e., the relevant information they own as 
their private knowledge, so that the best possible solution cannot be achieved. In these 
cases, mechanism design techniques can be used as solution approaches, which augment 
combinatorial algorithms with appropriate monetary payments, aimed at motivating all 
agents to truthfully report their private types (see, e.g., Vazirani, Nisan, Roughgarden, & 
Tardos, 2007; Shoham & Leyton-Brown, 2009). 

On the class of social choice utilitarian problems, agent types encode (monetary) val- 
uations over the set of all possible solutions and the goal is to compute a solution max- 
imizing the social welfare, i.e., the sum of agents' true evaluations. A prominent role in 
mechanism design for problems of this class is played by the Vickrey-Clarke-Grove (VCG) 
paradigm (Vickery, 1961; Clarke, 1971; Groves, 1973), which is a general method for design- 
ing truthful mechanisms, i.e., mechanisms where truth-telling is a dominant strategy for each 
agent. In particular, VCG mechanisms are efficient. That is, they guarantee that a solution 
maximizing the social welfare is actually computed. However, they are not budget-balanced, 
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i.e., the algebraic sum of the monetary transfers is not zero and mechanisms from this class 
can run into deficit. In fact, this is a well-known drawback of VCG mechanisms (see, e.g., 
Archer & Tardos, 2007), but it is essentially the best one can hope to do, given classical 
impossibility theorems (Green k, Laffont, 1977; Hurwicz, 1975), stating that no truthful 
mechanism can be designed to be always efficient and budget-balanced. 

In many practical applications, as the one that inspired the present work, payments to 
agents can be performed after the final outcome is known, so that some kind of verification 
on reported types might be possible. Mechanisms with verification have been introduced 
by Green and Laffont (1986) and subsequently studied in a number of papers. For instance, 
Nisan and Ronen (2001) considered verification for a task scheduling problem: We have 
some agents declaring the amount of time they need to solve each task, and the goal is to 
have all tasks being solved, by minimizing the completion time of the last-solved one (hence, 
the make-span). In this context, payments are computed after the actual tasks release times 
have been observed, so that we have, for instance, the ability to "punish" some agent whose 
declared ability has been verified to be different than its actual performance in the process. 

Note that the knowledge of the actual outcome represents a source of additional in- 
formation to define payment rules, as it might partially reveal agents' types. However, 
this additional power is not considered in the classical mechanism-design setting. In fact, 
whenever verification is allowed, some (classical) impossibility results might no longer hold. 

Compared to standard mechanisms (see, e.g., Vazirani et al., 2007), those with verifi- 
cation have received considerably less attention in the literature (see, e.g., Nisan & Ronen, 
2001; Auletta, De Prisco, Penna, & Persiano, 2009; Penna & Ventre, 2009; Krysta k 
Ventre, 2010; Ferrante, Parlato, Sorrentino, & Ventre, 2009). In particular, these works 
consider a verification ability that is partial, in the sense that agents' (mis)reporting is re- 
stricted to true types plus certain lies (e.g., values that are lower than the true ones), and 
that verification is focused to detect such lies only. An extension of this basic model has 
been recently proposed by Caragiannis, Elkind, Szegedy, and Yu (2012), who assume no 
a-priori restrictions on the agents' reported types, within a setting where an agent cheating 
on her/his type will be caught with some probability that may depend on her/his true type, 
the reported type, or both. In fact, despite these different facets of the verification power, 
most of the mechanisms with verification proposed in the literature share the idea of provid- 
ing incentives to truthfully report private types by exploiting the intimidation of punishing 
those agents that will be caught lying. Moreover, while budget limits have been considered 
in some approaches (see, e.g., Nisan & Ronen, 2001), no mechanism with verification has 
been designed to be budget-balanced, with the focus being on truthfulness and efficiency. 

In the paper, we study mechanisms with verification from the same perspective as Cara- 
giannis et al. (2012), in particular by considering a setting where there is no restriction 
on the agents' reported types. However, differently from this work, we assume that verifi- 
cation is deterministic, i.e., all incorrect declarations on allocated goods will be eventually 
detected. This leads to a stronger verification ability, which could be in principle used 
to easily enforce truthfulness by just punishing those agents whose declarations have been 
checked to be incorrect ones. However, such an approach would be hardly acceptable by 
agents in real-life applications, because a true punishment would require a clear proof of a 
malevolent behavior. Indeed note that, in practice, possible discrepancies between agents' 
declarations and third-party verified values may be due to many different reasons, in par- 



2 



ticular to the subjective judgment of the verifier. Based on this observation and motivated 
by a real-world application domain, we will assume in the paper that only a limited use 
of such verification power can be made, and indeed that mechanisms have to be designed 
which are not based on punishments — while nonetheless resulting to be truthful, efficient, 
and even budget-balanced. 

1.1 Mechanisms for Fair Division with Monetary Compensation 

We consider mechanisms with verification in the context of fair allocation problems (see, 
e.g., Moulin, 2003; Young, 1994; William, 2011). We assume that a set of indivisible goods 
to be allocated to a set of agents is given. Each agent is equipped with a private preference 
relation, which is just encoded as a real-valued function (basically, a monetary valuation) 
over all possible goods — formal definitions are in Section 3. An agent can have allocated 
more then one good, in which case her/his evaluation is additive over them. Moreover, 
goods are non-sharable, i.e., each good can be allocated to one agent at most. However, 
monetary transfers are allowed, in terms of both payments charged to agents and monetary 
compensations provided to them. The goal is to find an efficient allocation, that is, an 
allocation maximizing the total value of the allocated goods, by designing rules guaranteeing 
that certain desirable properties are achieved, such as truthfulness and individual rationality, 
i.e., no agent is ever worse off than he would be without participating to the mechanism. 
Moreover, we want to obtain outcomes that are "politically" acceptable. That is, agents 
should perceive the designed mechanism as a fair one (see, e.g., Brandt & Endriss, 2012), 
independently of the rules leading them to be honest. For instance, it is desirable that no 
agent envies the allocation of any another agent, or that the selected outcome is Pareto 
efficient, i.e., there must be no different allocation such that every agent gets at least the 
same utility and one of them even improves. 

Note that the above model for fair allocation is general enough to deal with many prac- 
tical scenarios, and it has been indeed intensively studied in the literature. One example 
application is parking space and benefit allocation at a workplace, where each employee 
gets a parking space and a share from a fixed benefits package. House allocation problems 
are another classical example, where agents collectively own a set of houses, and we look 
for a systematic way of exclusively assigning a house to each agent, possibly with monetary 
compensations. A third example is job allocation among a group of employees, e.g., assign- 
ing an unexpected task among the business units of a corporate, where a job and possibly 
a monetary compensation is assigned to each employee. Finally, yet another classical ap- 
plication is room assignment-rent division, where a group of agents shall rent a house, with 
each of them getting a room and paying a share of the rent of the house. 

The model and, in particular, properties of fair allocations with indivisible objects 
and monetary transfers have been studied, e.g., by Svensson (1983), Bevia (1998), Maskin 
(1987), Tadenuma and Thomson (1993), Meertens, Potters, and Reijnierse (2002), Tade- 
numa and Thomson (1991), Alkan, Demange, and Gale (1991), Willson (2003), Su (1999), 
Yang (2001), Quinzii (1984), Sakai (2007). Moreover, procedures to compute fair allocations 
have been proposed by Aragones (1995), Klijn (2000), Haake, Raith, and Su (2002), Brams 
and Kilgour (2001), Potthoff (2002), Abdulkadiroglu, Sonmez, and Unver (2004). 
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None of the above listed approaches, however, can guarantee the elicitation of honest 
preferences from the agents. In fact, the question of designing truthful and fair mechanisms 
has been recently considered as well (Andersson & Svensson, 2008; Andersson, 2009; Svens- 
son, 2009; Yengin, 2012; Ohseto, 2004; Porter, Shoham, & Tennenholtz, 2004; Shioura, 
Sun, Sz Yang, 2006). In these approaches, while budget limits are sometimes enforced and 
mechanisms are defined that cannot run into deficit, budget-balance is never guaranteed. 
Indeed, this comes again with no surprise, given that no truthful mechanism can be simulta- 
neously fair (e.g., envy-free or Pareto-efficient) and budget-balanced (see, e.g., Tadenuma 
& Thomson, 1995; Alcalde & Barbera, 1994; Andersson, Svensson, & Ehlers, 2010). 

To circumvent this impossibility, approaches have been studied that focus on weaker 
notions of truthfulness. For instance, Andersson et al. (2010) and Pathak (2009) consider 
a notion of degree of manipulability which can be used to compare the ease of manipula- 
tion in allocation mechanisms, whereas the notion of weak strategy-proofness is considered 
by Lindner (2010), i.e., cheating agents are always risking an actual loss, and are never 
guaranteed to cheat successfully. 

In this paper, we depart from the settings studied in all such earlier approaches, because 
we are interested in applications where a form of verification is available to the mechanism at 
the time of deciding monetary compensations among agents. It follows that the mechanism 
may exploit the knowledge of private agents' types, and hence classical impossibility results 
may no longer hold. Indeed, by exploiting this knowledge, and even assuming a setting where 
agents with verified incorrect declarations are not punished, we can show that it is possible 
to design mechanisms for allocation problems that are truthful, efficient, budget-balanced, 
individually rational, and fair. Note that having this kind of a-posteriori knowledge at 
payment time is quite common to many applications. In fact, we were inspired by the 
following real-world scenario, which will be later formalized in Section 2. 

1.2 The Italian Research Assessment Program (VQR) 2004-2010 

In 2012, the National Agency for the Evaluation of Universities and Research Institutes 
(ANVUR) has promoted the 'VQR' assessment program devoted to evaluate the quality of 
the whole Italian research production in the period 2004-2010. Every research structure R 
has to select some research products, and submit them to ANVUR. While doing so, the 
structure R is in competition with all other Italian research structures, as the outcome of 
the evaluation will be used to proportionally transfer the funds that have been allocated 
by the Ministry to support research activities in the next years (until data from a new 
evaluation for the subsequent period will be available). 

Every structure is then interested in selecting and submitting its best research products. 
To this end, the program is articulated in three phases. First, authors are asked to self- 
evaluate their products, according to some evaluation criteria defined by groups of experts 
chosen by ANVUR. Here, it is assumed that, having such criteria, every author is able to 
perform a ranking of her/his own products, ideally to equip each of them with a quality 
score. 1 In the second phase, based on the self-evaluations being collected, every structure R 

1. The set of the possible scores is defined in the VQR guidelines. To our ends, this detail is immaterial 
and scores are just viewed as (arbitrary) real numbers. 
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selects and submits to ANVUR (at most) three products for each author affiliated to R, 2 in 
such a way that the sum of the declared, i.e., self-assessed, scores of the selected products is 
the maximum possible one for structure R, and that each product is formally associated to 
one author at most. Finally, ANVUR formulates its independent quality judgment about 
submitted publications, and the sum of their "true" scores (i.e., those resulting by ANVUR 
evaluation) is then the VQR score of R. Eventually, R will receive funds in the next years 
proportionally to this score. 

In fact, a VQR score is assigned not only to the structure R, but also to all its sub- 
structures (e.g., to Departments, if R is a University). Of course, this has an impact on the 
funds redistribution inside every research structure. Therefore, while it is clear that each 
structure has to maximize the total value of the products submitted to ANVUR, whenever 
the same product has different co-authors, some strategic issues come into play and co- 
authors' personal interest may induce them to cheat on the quality of their products, and 
may lead to choices going far from the optimum (total) value. We thus believe that mecha- 
nism design is of high practical interest in contexts resembling this one. In the mechanism, 
since products are indivisible, i.e., each of them can be formally allocated to one author at 
most, payments should reflect "adjustments" over the VQR scores, which suitably take into 
account the various co-authors no matter to whom any publication is actually allocated. 
Moreover, as payments can be computed at the end of the process on the basis of the VQR 
scores made available by ANVUR, a mechanism with verification can be conceived, with 
ANVUR playing the role of the verifier. 

1.3 Contributions 

Motivated by the above application scenario, in this paper, we study allocation problems in 
a strategic setting where agents can misreport their private types, and we study mechanisms 
with verification from both the algorithmic and the computational complexity viewpoint. 

Algorithmic Issues. We show that in the given setting none of the classical impossibility 
theorems discussed above holds. In particular, we exhibit a payment rule that turns any 
optimal allocation algorithm, i.e., any algorithm computing an optimal allocation given the 
reported types, into a mechanism with verification such that: 

► The mechanism is truthful. This is shown by pointing out a number of properties of 
allocation problems which are of interest on their own. 

► The mechanism is efficient, budget-balanced, individually rational, envy-free, and Pareto 
efficient. 

► The mechanism satisfies the following properties, which are in fact crucial — and hence 
specifically discussed — for the case study of the Italian Research Assessment Program: 

• The payment rule is indifferent w.r.t. the scores (possibly cheats) declared for goods 
that do not occur in the allocation being selected (and hence that are not verified). 
In theory, the feature is irrelevant given that truth-telling is a dominant strategy. 

2. Actually, the number of publications is not always three, in some specific exceptions. Again, this is not 
a relevant issue, as we shall see in the formalization in Section 3. 
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In practice, this might be rather useful in the VQR program, because unsubmitted 
research products with their unverified declared scores should have no influence on 
the payments, as they have no influence on the actual score of the research structure 
after the evaluation is carried out. Moreover, it is unlikely that a consensus can be 
achieved on a mechanism where payments are based on unverified self-declarations. 

• Verification is not used to force truthfulness by just punishing those agents whose 
reported values are found different from the verified ones. Again, the rationale 
is that a punishment approach would be hardly "politically" acceptable in this 
context (charging university professors because of their self-evaluation about some 
paper would require some convincing proof of their malicious behavior, and would 
start never-ending disputes). 

• The payment rule is indifferent w.r.t. the specific optimal allocation being selected 
by the mechanism. Thus, the score of each researcher /substructure is univocally 
determined by the overall score of the structure, and any researcher /substructure 
does not have any reasonable argument against her/his structure because of possible 
alternative allocations. In fact, this is a very strong kind of fairness property, which 
immediately entails envy-freeness and Pareto-efficiency. 

► Agents' utilities are distributed according to the Shapley value of two suitably-associated 
coalitional games — see, e.g., (Vazirani et al., 2007), for a comprehensive introduction 
to sharing problems and coalitional games. In fact, the Shapley value is a prototypical 
solution concept for fair division with monetary compensations, and its desirable prop- 
erties in (games associated with) allocation problems have been largely studied in the 
literature (e.g., Moulin, 1992; Maniquet, 2003; Mishra & Rangarajan, 2007). 

Note that the Shapely value has been studied in mechanism-design contexts too, where 
emphasis has been given to the pricing problem for a service provider (Moulin &; Shenker, 
1997; Moulin, 1999; Jain & Vazirani, 2001): The cost of providing a service is a function 
of the sets of customers, and the goal is that of determining which customers (and at a 
what price) have to receive it. The model gives rise to a cross-monotonic cost-sharing 
game, where Shapley-value based sharing mechanisms can be defined that are truthful and 
budget-balanced, and which achieve the lowest worst-case loss of efficiency over all utility 
profiles (Moulin & Shenker, 1997). With this respect, the pricing rule can abstractly be 
viewed as a witness that, whenever (partial) verification is possible, Shapley- valued based 
mechanisms may also be implemented with no loss of efficiency at all. 

Complexity Issues. Computing an optimal allocation on the basis of the reported types 
is an easy task, which can be carried out via adaptations of classical matching algorithms. 
However, one might suspect that our mechanism is not computationally-efficient as it is 
based on the computation of a Shapley value. This is indeed a challenging task that involves 
iterating over all possible subsets of agents. We analyze these issues, and we provide the 
following contributions: 

► We show that computing the Shapley value for allocation problems is inherently in- 
tractable, in fact, ^P-complete. Note that, while membership results for are rather 
common for problems involving Shapley value computations, #P-hardness results have 
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only been proven so far for a few kinds of coalitional games, in particular, for weighted 
voting games (Deng & Papadimitriou, 1994) and minimum spanning-tree games (Nag- 
amochi, Zeng, Kabutoya, & Ibaraki, 1997). 

► In order to deal with scenarios with many agents demanding for computational efficiency, 
two modified rules, p^ and p^, are presented, which are founded on a fully polynomial- 
time randomized approximation scheme for the Shapley value computation. The resulting 
polynomial-time mechanisms retain most of the properties of p^. In particular, the 
mechanism based on p^ is truthful, efficient, and with high-probability it is approximately 
budget-balanced. Instead, the mechanism based on p^ is truthful in expectation, but 
always efficient and budget-balanced. 

Organization. The rest of the paper is organized as follows. The motivation scenario 
for the research reported in the paper is analyzed in Section 2. Then, Section 3 illustrates 
the formal framework and the basic concepts to design mechanisms with verification. The 
payment rule p^ is defined and analyzed in Section 4. Connections with coalitional games are 
pointed out in Section 5, while rules p^ and p^ are defined in Section 6, where computational 
issues are dealt with. A comparison with some related works is reported in Section 7, while 
a few final remarks are eventually discussed in Section 8. 

2. Motivating Example: The Italian Research Assessment Program 
(VQR) 2004-2010 

In this section we describe the motivating example and case study of the present work: 
the program for evaluating all Italian research structures for their activities in years 2004- 
2010. The evaluation is performed by ANVUR, the National Agency for the Evaluation 
of Universities and Research Institutes (www.anvur.org). Substructures (e.g., University 
departments) will also be evaluated, by considering the researchers affiliated to them. 

2.1 Formalization 

Let us hereinafter focus on a given structure R, let TZ be the set of researchers affiliated 
to R and, for each r G TZ, let products(r) be the set of the research products of r in the 
given period 2004-2010. In the first phase of the program, each researcher r G TZ associates 
a quality score score r (p) € R with each product p G products (r). 

An allocation for R is then a function ip mapping each researcher r G R to a set of 
publications ip(r) C products(r) with \if)(r)\ < 3 and with ip(r) PI ip(r') = 0, for each 
r' G TZ \ {r}. In the second phase, the structure R computes an optimal allocation, i.e., 
an allocation V* such that Y^reV. E pG </,*( r ) score r {p) > Y. r eK EpeVM sc ore r {p), for each 
possible allocation ip. The goal of structure R is indeed to maximize its total score (social 
welfare), and thus the funds that R eventually will receive. Note that this optimization 
phase is based on the scores declared by researchers. Therefore, the goal of R will be 
achieved if authors correctly/truthfully self-evaluate their products. 

Example 2.1. Let us consider the simple scenario that is illustrated in Figure 1(1) by 
exploiting an intuitive graphical notation. Assume that there are just two researchers, r\ 
and r2, affiliated to R. Moreover, assume that products (ri) = {p±, ...,ps} and products (r2) = 
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Figure 1: Running example in Section 2. 



{p4,...,pg}, and notice that products p^ and p§ have been co- authored by T\ and r 2 . For 
each pi £ products{r\) (resp., € products {r 2)), let the self-assessed score score ri (pi) 
(resp., score r2 (pi)) be the one associated with the edge connecting r\ (resp., T2) to p%. 
Given this setting, it is then easily seen that an optimal allocation for R is ip* such that 
= {pi,P2,Pi} and ip*{r 2 ) = {p 5 ,p7,p 8 }—see Figure 1(H). < 

Let i/j* be the optimal allocation being selected by R. All products in Ure7e^*( r ) are 
then submitted to ANVUR for being evaluated (according to the criteria that are publicly 
available). As a result of the third phase of the VQR program, each submitted product 
p € \J r £nip*(r) is associated with a VQR score score VQIi (p) € R, which can be in principle 
different from the score score r (p) declared by some author r G 1Z. The overall VQR score of 
the structure R, score VQK (if)*) = ^rg7£ SpeV>*W score vQR(p)> wm be- eventually translated 
to money, proportionally to the performance of R w.r.t. the performances of the other 
research structures. Thus, it is actually immaterial to talk about scores or money in this 
application scenario. 

Example 2.2. Assume that there is a precise agreement between self-evaluations (leading to 
the optimal allocation ^* for structure R) and ANVUR evaluations, i.e., for each researcher 
r € 1Z and each product p € products(r) n ip*(r), score VQn (p) = score r (p) holds. Then, we 
have that score VQR (ip*) = 51 — see again Figure 1(11). Moreover, the funds of R (actually, 
the part of funds connected to the research performance) will be directly proportional to 
51. Therefore, if another structure R' gets 102 as VQR score, its (research-related) funds 
will be double the funds of R. <1 

2.2 Division Rules and Desirable Properties 

While the first aim of the VQR program is to evaluate the various Italian research structures, 
it is known that the obtained information will be used to evaluate substructures, too (e.g., 
University departments). Thus, following the same principle of binding funds to VQR scores 
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used for the main structures, it is natural to exploit such scores for money distribution inside 
every research structure (in principle, up to research groups and individuals). 

Of course, this poses the question of how the total score (money) of a structure can be 
fairly distributed over its substructures (and possibly over individuals), in such a way to 
reflect their actual contribution to the result achieved by the structure. Formally, we need 
the definition of a division rule 7, that is, of a real-valued function that given a researcher 
r GTZ and an allocation ip* , returns the score 7 r (V'*) of r under ip* . Then, slightly abusing 
notation, for any substructure <S C 1Z (here just viewed as the set of its members), denote 
by 7s(V>*) the value Eres 7r(V>*)- 

Surprisingly, no division rule has been formalized in the assessment program, up to now, 
and this is a source of confusion in many researchers. As a matter of fact, most researchers 
believe that the score of substructures will be based on the naive pro j rule, where for any 
researcher r, proj r (^*) is the sum of the VQR scores of the products allocated to r in tp*, 
i.e., proj r (^*) = p£ip*(r) ^^"^vqr(p)- For instance, in the setting of Example 2.2, we 
have that proj ri (^*) = 25 and proj r2 (?/>*) = 26. In fact, on the one hand, this approach 
trivially satisfies a desirable property of division rules. 

(PI) "budget-balance": A division rule 7 must completely distribute the VQR score of 
R over all its members, i.e., Ylren^i^*) = score VQR (R). 

However, on the other hand, proj might lead to scenarios where some researcher (and 
in turn some substructure) may have some reasonable argument against her/his structure 
because of possible alternative allocations where that researcher may get a higher score. 
Indeed, proj does not satisfy the following: 

(P2) "fairness": A division rule 7 should assign to each researcher the best score among 
all possible allocations, i.e., for each r G 7Z, J r (ip*) > 7r(V0? f or an V allocation if). 

Example 2.3. Consider again the optimal allocation tp* depicted in Figure 1(11), and com- 
pare it with the allocation ip* of Figure 1 (III) - Note that tp* is another optimal allocation. 
Moreover, it is easily seen that proj ri (tp*) = 25, whereas proj = 26. Thus, 77 would 

complain with her/his structure, if ip* is selected in place of ip* . < 

In fact, to design a division rule satisfying the above (rather strong) fairness criterium 
is not straightforward. Indeed, property (P2) basically tells us that there must be exactly 
one possible way to distribute the score scoTCyQji (i?) over the members of R, independently 
of the optimal allocation being actually selected. Of course, difficulties emerge in those 
cases where products have multiple co-authors. Thus, to address this issue, one may find 
natural to consider and analyze the following two division rules: 

owner: assign to each author the sum of the "normalized" scores of the submitted prod- 
ucts (s)he has co-authored, where by normalization we just mean here dividing the 
score of any product by the number of its authors. For instance, in the setting of 
Example 2.2, we have that, in the optimal allocation ip* of Figure 1(11), half of the 
score associated with p^ (equivalently, p$) is given to 77, and the remaining half to r<i- 
However, even this attempt of having a fair division rule is unsuccessful: The setting 
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of Example 2.3 already evidences that this approach does not satisfy property (P2): 
just check that owner r2 ) = 26 while owner r2 ('0* ) = 33. Indeed, according to this 
division rule, the score of each researcher depends on the number of publications (s)he 
has coauthored and R has submitted to ANVUR, which may be very different in the 
various allocations. 

all: distribute the score score vqr(-R) to the members of R proportionally to their overall 
production, and not just on the basis of the submitted publications. Accordingly, for 
any researcher r 6 1Z, we define 

J2p£products(r) SCOre r(p) ^ . . 

allr^ ) = ^ ^ — pr x 2^ score VQR (p). 

l^reTi Z^peproducts(r) SCOre r {p) pg^/x 

In fact, note that all satisfies property (P2), precisely because the division does not 
depend on the specific products being selected and submitted to ANVUR. 

Actually, we point out here that, while being conceptually simple and still satisfying the 
fairness requirement, all would be hardly implementable in practice. First, under all, it is 
clear that researchers might want to act strategically and overestimate the quality of their 
own products. Second, even if all is adjusted in a way that it would be always convenient 
for each researcher to be truthful, we believe that such a theoretical guarantee would still 
not suffice to create a consensus on the division rule, given that it strongly depends (also) 
on scores that are not certified by ANVUR. Thus, the specific application scenario we are 
considering suggests the following additional requirement, which is not satisfied by all: 

(P3) "implementability" : A division rulej must be indifferent w.r.t. the scores (possibly 
cheats) declared for unverified products, that is, for products not occurring in the 
selected allocation. 

So far, none of the proposed examples of division rules emerged to be acceptable. Moreover, 
in our discussion, we have anticipated another crucial requirement for a division rule, which 
is truthfulness. Indeed, depending on the specific division rule being selected, co-authors 
may be competitors and might want to act strategically to improve their own score. In 
particular, while it is clear in principle that the total value of the products should be 
maximized (social welfare), authors' personal interest may lead to choices going in a different 
(non-optimal) direction. Thus, a division rule must prevent manipulation: 

(P4) "truthfulness": A division rule 7 must provide no incentive in misreporting the 
score of the research products. 

Very recently, (perhaps) having recognized that the research programme might provide in- 
centive to strategic behaviors, ANVUR pointed out that only aggregated information about 
substructures will be made available, rather than the individual scores of the researchers. 
However, note that this is not satisfying for two reasons. 

First, it is clearly a waste of money to conduct such a thorough evaluation of the 
quality of the Italian research, without then providing the output of the results for research 
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Figure 2: Strategic manipulations with the rule proj. 



products. Indeed, this kind of information would be useful to define the part of the salary 
of each researcher that is function of her/his productivity, according to the current law. 3 
This is so evident that many researchers still believe that such an information will be used 
for their personal evaluation (soon or later), and thus are adopting strategic behaviors to 
have allocated the best products (usually, under the assumption that the rule proj will be 
used). However, this might not lead to the global optimum for their research structure, 
because of possible poor performances of co-authors, as we shall see in the example below. 

Second, disclosing only aggregated information does not prevent at all the emergence 
of strategic behaviors. Indeed, such strategic issues still emerge as soon as two researchers 
from different substructures co-authored some research product, with each of them being 
interested in providing as much as contribution as possible to her/his own substructure. 
Again, this might not lead to the global optimum, as we next exemplify for the rule proj . 

Example 2.4. Assume that n and r<i belong to different substructures. Consider the 
rule proj, and assume that researcher r\ declares that her/his products P2 and p^ are of 
poor quality (e.g., score ri (p2) = score ri {pz) = 2), as it is illustrated in Figure 2(1). Then, an 
optimal allocation ip* is the one shown in Figure 2(11), where the set {pi, Pi, P5, P6, P7, Ps} of 
products is submitted to ANVUR. Assume that, for all these products, there is an agreement 
between declared scores and ANVUR ones. It follows that proj ri (^>*) = 26. On the other 
hand, recall that in the allocation tfj* of Figure 1(11), which has been computed based on 
the declaration that score Tl {jp2) = score ri (p2) = 7, it holds that proj, ri (V>*) = 25. Thus, ri 
finds convenient to misreport the true scores of p2 and p^, and underestimate them. Note 
however that the overall score of the structure R is still 51 and, in fact, i/j* coincides with 
the optimal allocation i/j* depicted in Figure 1 (III) and discussed in Example 2.3. 

Then, consider a slight variation of the problem instance depicted in Figure 2 where the 
actual value of product p-j is 6 (instead of 8). Then, the above egoistic behavior of agent 
r\ also damages its research structure because it leads to a sub-optimal allocation. Indeed, 
due to the low declared values for p2 and p^, product p-j is selected and allocated to T2 in 
the unique (wrong) optimal allocation, whose total score is now 49 (instead of 51). <3 

Analogously, the emergence of strategic issues with the rule owner can be easily seen. 

Example 2.5. Assume again that r% and T2 belong to different substructures. Consider now 
the rule owner, and assume that researcher r\ declares that score ri {p2) = score ri (p^) = 9. 
Then, consider the optimal allocation tp* shown in Figure 3(11), and note that, in this case, 
the set {pi,P2,P3,P5,P7,Ps} of products is submitted to ANVUR. 

3. Actually, this applies only to tenured positions at Universities. 
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Figure 3: Strategic manipulations with the rule owner. 



Now, assume that the VQR scores of these products are those illustrated in Figure 1(1), 
i.e., the same ones as those discussed in Example 2.1. Thus, r\ has cheated with the aim of 
overestimating the products of which (s)he is the sole author. In fact, this is convenient to 
her/him, since according to the rule owner, r\ now gets owner ri (ip* ) = 24 + 4, because of 
the products in {^1,^2,^3} allocated to her/him (with overall score 24) and of the product 
P5 co-authored with r<i (whose overall score is then shared with r<i). On the other hand, 
just recall that in the allocation ip* of Figure 1(11), which has been computed based on the 
"truthful" declaration that score ri (p2) — score ri {p^) — 7, it holds that owner ri ("0*) — 25. 
It follows that r\ finds convenient to cheat under owner, in order to increment the number of 
products submitted to the VQR that (s)he has coauthored. However, the egoistic behavior 
of agent r\ again damages its research structure, as we now have that the total VQR score 
is 50 (instead of 51) — see again Figure 3(11). < 

As a matter of fact, the emergence of strategic issues across substructures risks to pe- 
nalize, in the long term period, collaborations and cross- fertilizations. 4 To prevent all these 
problems, a truthful mechanism is of course definitively needed. In fact, as the above ex- 
amples might have already suggested to the careful reader, truthfulness can be achieved by 
exploiting the fact that ANVUR evaluation corresponds to a "verification ability" available 
in the setting. For instance, one might punish (e.g., by assigning as overall score) all 
those researchers whose reported values are found different from the verified ones (usually 
interpreted as "lying agents" ) , as it is in the spirit of most of the literature on mechanisms 
with verification (see, e.g., Auletta et al., 2009; Penna & Ventre, 2009; Krysta & Ventre, 
2010; Ferrante et al., 2009; Caragiannis et al., 2012). Indeed, under the intimidation of 
a punishment, any (reasonable) division rule can be turned into a truthful one. However, 
in the application scenario we are considering, a punishment approach would be hardly 
"politically" acceptable — just think that a number of researchers have already announced 
that they will not participate to the VQR program because they disagree with some of the 
evaluation criteria made available by ANVUR, which are in fact perceived as imposed by 
"law" rather than as being the outcome of a public discussion on the subject. Moreover, 
charging researchers because of some discrepancy between their self-evaluation about some 
paper and the one by ANVUR experts would require some convincing proof of their ma- 
licious behavior. Therefore, any punishing approach would be quite hard to implement in 
practice, for this real-world case study. For this reason, we avoid this brute-force approach, 
and ask that the following property holds. 

4. It is not by chance that the authors of this paper belong to different substructures of the same University. 
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(P5) "no punishment": A division rule 7 must be such that, for each r G 7Z and each 
allocation ifj* , the value 7r(V ; *) ^ s indifferent w.r.t. self-assessed scores, in particular, 
w.r.t. discrepancies possibly emerging between such scores and VQR ones. 

Note that, in the light of the above requirement, we look for a method to enforce truthfulness 
where verification is used in a rather limited sense. Moreover, it is relevant to observe that 
if the division rule is not well-designed, then cases might emerge where there is no way at 
all to exploit verification (even in its strongest form where punishment is allowed). 

Example 2.6. Consider again the use of the rule proj in Example 2.4, and recall that r\ 
finds convenient to underestimate the true scores of P2 and p%. However, since P2 and p^ 
does not occur in ip* as we can see in Figure 2(11), then there is no way to discover that n 
has actually cheated. Therefore, in this case, verification on the selected products provides 
no-extra power, and truthfulness is not achieved. <d 

3. Fair Allocation Problems 

By looking at the examples discussed in the above section, it emerges that defining a "good" 
division rule is not an easy task in allocation problems with indivisible goods. 

In this section, we provide the formal framework for studying such problems, based on 
mechanism design tools. In particular, we focus on mechanisms equipped with a verification 
ability, which meets the "no-punishment" perspective. To help the intuition, after notions 
are defined in the formal framework, we discuss how they fit our running (motivating) 
example about the Italian research assessment programme. 

3.1 Formal Framework: Allocations and Strategic Setting 

Assume that a universe U of indivisible goods is given. An allocation scenario over U is a 
tuple S = (A, G,oj) where A = {1, ...,n} is a set of agents, G C U is a set of goods, and 
uj : A i-> N is a function associating each agent i G A with a natural number oo(i) > 0. 

An allocation for 5 is a function tt mapping each agent i G A into a set tt(i) C G of 
goods with |7r(i)| < oo(i) and such that tt{i) n ir(j) = 0, for each agent j ^ i. Note that 
00 provides the upper bounds on the number of goods that can be allocated to agents. Of 
course, this is more general than assuming that no bound is given, which is just the special 
case oj{i) = \G\, for each agent i G A. Eventually, note that goods cannot be shared. In the 
following, we denote by dom(7r) the domain of tt, and by img(7r) the set of goods occurring 
in the image of tt, that is, [j iedom ^ 7r ( i )- 

The type of an agent is a real- valued function over G, which is meant to express her/his 
evaluation of each single good. A vector w = (wi, w n ) where Wi : G 1— > R is the type of 
agent i, for each i G A, is called a type vector. The value of an allocation tt for S w.r.t. w, 
denoted by val(7r,w), is given by J2iedom(w) w i( 7T )- Then, tt is optimal (for S w.r.t. w) if 
there is no allocation tt' for S such that val(7r',w) > val(7r,w). The value of an optimal 
allocation for S w.r.t. w is denoted by opt (5, w), while the set of all optimal allocations 
for S w.r.t. w is denoted by IT!j w , or simply by 11^ if S is understood from the context. 

For each agent i, let Di be the set of all her/his possible types, and let D be the Cartesian 
product Di x • • • x D n . Hereinafter, we assume that an allocation scenario S = (A,G,u) 
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is given, together with two type vectors t = (ti,...,t n ) € D and d = (di,...,d n ) G D. In 
particular, we assume that each agent i reports a declared type di, which might be different 
from her/his actual evaluation tj of the available goods, called the true type of i. Vector d 
is public knowledge, while vector t is not, because type U is private knowledge of agent i. 

Allocation problems h-> VQR. The motivating scenario discussed in Section 2 is a special 
case of the above general framework. Indeed, we can associate each structure R with an 
allocation scenario Sr = (A, G, 3), where A is the set of researchers affiliated to R, G 
is the set of their products, and 3 : A *— > {3} is the constant function stating that each 
researcher can submit 3 products at most. In this setting, d encodes the scores declared 
by the researchers (with the negative score —1 being conventionally assigned by di to the 
products that i declares not to have authored). This correspondence is exemplified below. 

Example 3.1. Consider again the setting of Example 2.5. The given research structure R 
can be modeled as the allocation scenario {{r±, r2}, {pi, ...,p$}, 3). Moreover, the vector d 
is such that, for each i 6 {1, 2} and j € {1, 8}: d ri (pj) = score ri (pj), if pj € products(ri), 
and d n (pj) = —1, otherwise. Note that Figure 3(1) can be viewed as a graphical repre- 
sentation of ({n, r2}, {pi, .-.,P8}, 3) where negative edges are omitted. For instance, for 
researcher r±, we have d ri (p\) = 10, d ri (p2) = 9, d ri {jp-j) = —1, and so on. Clearly, optimal 
allocations for the research assessment problem one-to-one correspond to optimal ones for 
the corresponding allocation scenario w.r.t. d. For instance, the allocation ip* in Figure 3(11) 
is an optimal allocation for ({n, r2}, {pi, ...,ps}, 3) w.r.t. d. < 

Concerning the vector t of true types in the VQR setting, recall that research products 
are evaluated by ANVUR according to some publicly available criteria, and that, having 
such criteria, every author is expected to be able of self-evaluating her/his own products in 
a way consistent with ANVUR evaluation. Thus, the vector t encodes the "true score" of 
each product, as it can be determined according to ANVUR evaluation criteria. 

Actually, note that in the case of the VQR setting, different researchers cannot have 
truly different true types w.r.t. a product they have co-authored, because we are assuming 
that true types coincide with ANVUR evaluations and ANVUR provides just one value 
for each product. More formally, in any VQR allocation problem (A, G, 3), the underlying 
vector t of true types is such that U(g) > and tj(g) > implies that ti(g) = tj(g), for each 
good g G G and pair of agents i,j G A. Of course, since the proposed framework is more 
general, it may well support possible extensions of the current VQR setting tailored to a 
finer-grained analysis of interdisciplinary products. Indeed, for such products, co-authors 
can actually have different valuations for the same paper (e.g., for they belong to scientific 
communities with a different research focus) and, therefore, it makes sense to have the 
product reviewed by a different panel of experts for each author /area of interest. 

3.2 Mechanisms with Verification 

Throughout the paper, we consider mechanism design in a setting where a third-party, 
called the verifier, is formalized as a function v associating any allocation it with a vector 
v(7r) = (vi, v n ) of verified types, with v\ : img(7r) i— > M, for each agent i € A. In 
particular we assume that, for each agent i £ A and good g G img(7r), Vi(g) = U(g). Note 
that a verifier is always able to precisely determine the real value (agents' type) U(g) of 
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any good g in img(7r), i.e., of any good allocated to some agent by it. Thus, in our setting, 
values for allocated products can be fully verified. Instead, Vi is undefined over values that 
are not allocated, and hence not verified. 

In order to encourage agents to truthfully report their private types, we shall design 
mechanisms where monetary transfers can be performed, after verified types are available. 
Formally, a payment rule p = (pi, ■■■,p n ) is defined as a vector of functions, with pj(7r,d) 
being some amount of money that is given to agent i, on the basis of an allocation it and 
a vector d. Observe that, with this notation, any negative value pi(n,d) means that some 
amount of money is charged to agent i. Then, i's (quasi-linear) utility under p, sometimes 
called individual welfare, is defined as Uj p (7r, d) = «i(vr) + pi(n,d). Whenever the payment 
rule is easily understood from the context, i's utility is simply denoted as itj(7r, d). Note 
that utilities depend on verified types, as in the setting by Nisan and Ronen (2001). In fact, 
we could have equivalently stated them in terms of the true types. However, the proposed 
formulation best reflects the intended meaning of the framework, where payments — and 
hence utilities — depend on the verification process rather than on personal beliefs of agents. 

An allocation algorithm is a function A : D i-)- II mapping each vector w G D into an 
allocation A(w). We say that the algorithm A is optimal if A(w) G IT^, for each w G D. 

A mechanism with verification is a pair (A, p), where A is an allocation algorithm and 
p is a payment rule that can exploit the power of a verifier v. The mechanism (A, p) can be 
viewed as consisting of the following two-phases: First, agents report a declaration vector 
d, and an allocation it = A(d) is computed, by using some allocation algorithm A. Second, 
the true types "restricted" over img(A(d)) are revealed, i.e., v(ir) is made available, and 
payments under a given rule p are calculated for A(d) and d, by exploiting the knowledge of 
v(7r). Intuitively, our goal is to design a payment rule p guaranteeing that declared types in 
d induce an allocation A(d) maximizing the social welfare, i.e., such that A(d) G HI holds. 
A comparison of our approach to verification with existing ones is reported in Section 7. 

Allocation problems i— >■ VQR. In the VQR setting, we have already pointed out that 
ANVUR precisely plays the role of a verifier. For instance, by considering again Example 2.5, 
we have that the set {pi,P2,P3,P5,P7,Ps} is submitted to ANVUR and hence, for instance, 
v ri (pi) = t ri (pi), because product p\ of r± has been verified and hence n's evaluation about 
it has been disclosed — see also Figure 3(11). Moreover, negative values model the types of 
researchers for products that cannot be assigned to them. E.g., we have v ri (ps) = t ri (ps) = 
— 1, because r\ is not an author of p%, which is always trivially checked by the mechanism 
(note that the specific negative value is immaterial). 

Our goal is then to single out a mechanism with verification that uses appropriate 
"monetary" transfers to compensate the (globally) optimal allocation of the given indivisible 
goods. In particular, note that, in order to be consistent with the quasi-linear setting, 
payments in the VQR setting have to be intended as redistributions of the VQR overall 
score score V Q R (R). As a result, the role of a division rule is now to determine the individual 
welfare Ui(ir, d) associated with each researcher /agent i. In fact, payment rules should 
guarantee that welfare values satisfy a number of desirable properties, in particular, the 
relevant ones pointed out in Section 2. 

As a further remark, note that our choice of making the dependence on verified types 
explicit in the definition of the utility function is conceptually clearer than assuming a 
dependence on true types (in fact, eventually coinciding with verified ones). Indeed, our 
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choice is adherent to the VQR setting, where funds (the actual utility of each researcher) 
will be determined according to ANVUR evaluations. 

3.3 Properties of Mechanisms 

For any vector w = (wi, ■■■,w n ) G D of types (declarations) and for any type v)i G Dj, we 
denote by (wi,W-i) the type vector (wi, Wi-i, Wi, w/j+i, w n ) G D. 

Let (A, p) be a mechanism with verification, and let i by any agent in A and di her/his 
declared type. We say that di is a dominant strategy of agent i w.r.t. (A, p) if, for each 
vector w G D, Ui(A(di, w_j), (di, w_j)) > Ui(A(yv),w) holds. 

The mechanism (A, p) is truthful if, for each i G A, U is a dominant strategy. This is 
in fact property (P4) in Section 2. Let (A, p) be any truthful mechanism. In the paper, 
we will also focus on the following standard (ex-post) properties of such a mechanism, to 
be checked at the equilibrium t where agents truthfully report their private types: 

> efficiency: A(t) G IL*. That is, the social welfare is maximized. 

> individual rationality: Ui(A(t),t) > 0, for each agent i G A. Hence, voluntary participa- 
tion is encouraged. 

D> (strong) budget-balance: ^ ie _4Pi(^4(t), t) = 0. In other words, there is no transfer of 
money out of or into the mechanism. This is in fact property (PI). 

> envy-freeness: for each pair of agents i,j G A, and for each allocation ir such that 

7T(i) = A(t){j), Ui(A(t),t) >«i(7T,t). 

> Pareto- efficiency: there is no allocation ir such that: (1) Ui(A(t),t) < Ui(ir,t), for each 
agent i G A, and (2) there is an agent j G A with Uj(A(t),t) < Uj(-ir,t). That is, A(t) is 
not Pareto-dominated by any other allocation. 

Note that envy-freeness and Pareto efficiency are two direct consequences of the much 
stronger property (P2), which can now be formalized as follows: 

D> fairness: Ui(A(t),t) > Ui(ir,t), for each agent i G A and for each allocation ir. 

The two remaining properties (P3) and (P5) from the list in Section 2 ( "implementabil- 
ity" and "no punishment", respectively) will be considered as well. Note that these prop- 
erties must hold in general, i.e, not only at the equilibrium. In fact, in the more general 
setting of allocation problems, they can be respectively formalized as follows: 

> implementability: pj(7r,w) = pj(7r,w'), for each agent i G A, for each allocation tt, 
and for each pair w,w' G D of vectors that that may differ only outside img(7r), i.e., 
Wj(g) = w'j(g), for each j G A and g G img(7r). That is, goods that are not allocated 
and hence not verified do not play any role in payments. 

D> no punishment: pi(7T,w) = Pi(7t, (U, w_j)), for each agent i G A, for each allocation ir, 
and for each type vector w G D. That is, the payment function for agent i does not 
depend on her/his declared values, so that possible discrepancies with the verified type 
ti do not affect i's payment according to the given allocation. In other words, we may 
think of payments being always computed under the presumption of innocence, where 
incorrect declared values do not necessarily mean manipulation attempts by the agents. 
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Figure 4: One-good version of the allocation problem in Example 4.1, with two allocations 
and their associated update graph, as defined in the proof of Theorem 4.4. 



4. Mechanisms with Verification for Allocation Problems 

In this section, we introduce a mechanism with verification for allocation problems and start 
its analysis, by preliminary evidencing some properties that hold over optimal allocations. 

4.1 General Properties of Allocation Problems 

We first observe that the optimization problem used to allocate goods to agents can be 
equivalently reformulated in such a way that at most one good can be allocated to each 
agent. Intuitively, we may replace each agent i by uj{i) fresh agents with the same properties 
as i. We remark that such an equivalence is just used for the combinatorial optimization 
phase, i.e., without taking into account any (game theoretic) incentive consideration. 

Let S = (A, G, uj) be an allocation problem. We denote by S 1 its one-good version 
{A X ,G, 1), where A 1 is the set of agents Uie.4 clones(i) such that for each agent i G A, 
clones(i) is a set of uj{i) fresh agents, and where 1 is the constant function mapping each 
agent to 1. For any vector w mapping each agent in A to her/his type, let w 1 be the type 
vector for agents in A 1 such that = Wi, for each i G A and c G clones (i). Thus, in the 
allocation problem S 1 and considering the type vector w 1 each "clone" c G clones(i) can 
get at most one good, and it has the same valuations as agent i in w. 

Example 4.1. Consider again the ANVUR scenario discussed in Example 2.5 and il- 
lustrated in Figure 3. Recall from Example 3.1 the associated allocation problem Sr = 
(7Z, {p\, ...,ps}, 3), with 7Z = {ri,r 2 }. Moreover, recall that the vector d of declared types 
is such that, for each i G {1, 2} and j € {1, 8}: d ri (pj) = score ri (pj), iipj G products^), 
and d ri (pj) = —1, otherwise. Its one-good version Sj^ is shown Figure 4(1), where the set of 
agents is {(n)i, (ri) 2 , (n) 3 , (r 2 )i, (r 2 ) 2 , (^2)3} and where we have that = d ri (resp., 
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^ir 2 ) h = ^2)) f° r each h G {1, 2, 3}. In this graphical representation, crossing lines represent 
the edges of the bipartite cliques connecting the two groups of virtual researchers with their 
products, while, as usual, edges with negative scores (valuations for products owned only 
by other authors) are omitted. < 

For any set C C A of agents and set G' C G of goods, the tuple (C,G',uj) is the 
restriction of (A, G, oj) where only agents in C and goods in G' are considered. 5 Consider 
such a scenario {C,G',uj} and let ttq be an allocation for its one-good version (C, G',0;} 1 . 
Note that t\q induces the allocation nc(i) = \J c e clones (i) 71 c( c ) ^ or denoted by 

w-good(7T^). By construction, val(7re,w) = val(7r^, w 1 ). Conversely, any allocation Ttc for 
(C, G', uj) is associated with the non-empty set one-good^) of all those allocations it\ such 
that ttc = w-good^), also cane d the one-good forms of ttc- 

Fact 4.2. Let S be an allocation problem, let S 1 be its one-good version, and let tt\ be 
an allocation for S 1 . Then, tt^ is an optimal allocation for S 1 w.r.t. w 1 if, and only if, 
w-good(7r^) is an optimal allocation for S w.r.t. w. 

Example 4.3. Consider again the setting of Example 4.1, and the optimal allocation 
ipl shown in Figure 3(11). Then, it is immediate to check that the allocation depicted in 
Figure 4(11) is indeed an associated one-good form allocation, which is actually an optimal 
allocation for (1Z, {pi, ...,ps}, 3) 1 w.r.t. d 1 , by Fact 4.2. < 

We are now in the position of stating a property that holds on any optimal allocation tt. 
The property is in fact of interest of its own, i.e., independently of its application to the 
design of a mechanism with verification. In words, it tells us that, whenever we are interested 
in allocating goods to any subset of agents, we may safely consider only goods in img(7r), 
rather than the whole set G. In our case, it is a basic technical ingredient for showing a 
number of key properties because, intuitively, it allows us to get rid of alternative (optimal) 
allocations, possibly based on non-evaluated goods in G \ img(7r). 

Theorem 4.4. Let tt be an optimal allocation for (A, G, uj) w.r.t. w, and let G n = img(7r) C 
G be the set of goods allocated according to tt. Then, for each set of agents C C A, every 
optimal allocation for (C,G w ,uj) w.r.t. w is an optimal allocation for (C,G,u>) w.r.t. w. 

Proof. Let C Q Abe any set of agents, and let rjc be any optimal allocation for {C,G n ,uj) 
w.r.t. w, where G n = img(7r). We show that rjc is an optimal allocation for the unrestricted 
problem (C, G, uj) w.r.t. w, too. 

To this end, consider any optimal allocation Ac for the problem (C,G,uj) where all 
goods in G are available to the agents in C. We next prove that va.l(rjc,w) = val(Ac,w). 
This clearly follows from the optimality of rjc if img(Ae) C G n holds. Therefore, to be 
strictly better than rjc , a function must allocate some good in G\G W . Assume thus by 
contradiction that val(r/c,w) < val(Ae,w), and hence img(Ac) % G n , which entails that 
G w C G. Consider two allocations ir\ £ one-good(?7c) and A c G one-good(Ac), and observe 
first that: val^, w 1 ) = val(r]c, w) < val(Ac, w) = val(A c ,w 1 ). 

5. Note the little abuse of notation: the function u in (C,G',w) should be in fact its restriction over C. 
However, to keep the notation simple, we just write u>, as no confusion may arise. Similarly, any type 
vector w for A will be transparently considered as a type vector for any subset of agents C C A — we 
just get rid of the unused components associated with agents in A \ C. 
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Let S be the set of agents whose good-assignment are the same according to these 
allocations, i.e., S = {c e C 1 | A£(c) = r^(c)}. Then, define A(r/i, A£) = (C 1 \ S U {a, t}, E) 
to be the directed graph, called update graph for rj^ w.r.t. A*, whose nodes are the agents 
in C 1 that change their goods in the two allocations plus two distinguished nodes s and t, 
and whose edges in E are defined as follows: 

— There is an edge from agent c to agent c' if A^(c') = rj^(c) ^ 0; 

— There is an edge from s to agent d if there is no agent c such that Aj(c') = r)^(c) ^ 0; 

— There is an edge from agent c to t if there is no agent c' such that A^(c') = r/*(c) / 0; 

— No further edges are in E. 

For an example construction, consider Figure 4(IV) showing the update graph for the allo- 
cation shown in Figure 4(11) w.r.t. the allocation shown in Figure 4(111). 

As each agent gets at most one good in r/* and A*, each node in A(r?£, A*) but s and t 
has exactly one incoming edge and one outgoing edge. Moreover, by construction, s has no 
incoming edge, and t has no outgoing edge. Thus, the update graph consists of a number 
of paths from s to t and a number of cycles, all of them being disjoint from each other. 

Let {ti, Th} be the set of all possible paths from s to t or cycles in A (77*, A*), and for 
a path or a cycle Tj = cci, a m , let agents(rj) be the set {a±, a m } \ {s, t}. In addition, 
let us fix the following notation: For any function n' : A' i-> G' , let tt'[A'] denote the 
restriction of tt' over A' C A. Moreover, for the functions 7Ti : Ai 1 — > G\ and 7r 2 : A2 G2 
with A 1 n A 2 = 0, let 7Ti (+J 7r 2 : A 1 U ,4 2 i-» Gi U G 2 be such that (m |+j7r 2 )L4i] = 7Ti and 
(vri l+l vr 2 )[A 2 ] = 7T 2 . 

By the construction of the update graph, note that A* can be expressed in terms of the 
disjoint paths/cycles ti,...,t/j by the following expression: 

h h 
VciC 1 \ U agentsfa)] [+J Aj [agents^)]. 

i=i i=i 

Because val(r/^, w 1 ) < val(A*, w 1 ), there must exists a set of agents agents(rfc), associated 
with some disjoint path/cycle r^, with 1 < k < h, such that the value of the goods allocated 
to these agents according to A* is greater than the corresponding value for the same agents 
obtained after r/^. That is, the function ir Tk = r/^fC 1 \ agents(Tfc)] [+J A* [agent s(t£.)], which 
is an allocation for (CjGjUj) 1 , is such that val(7r Tfc , w 1 ) > val(r/^, w 1 ). Note that if were 
a cycle or a path of the form s, a 2 , . . . , a rn -i,t such that A*(a 2 ) C G n , then img(7r Tfc ) C G n 
would hold. Indeed, only the first node in a path, such as a 2 , may be such that A^(a 2 )\G 7r 7^ 
0. However, as observed above, this is impossible because val(7r rfc , w 1 ) > val(r/^, w 1 ) would 
contradict the optimality of r/^, and hence the optimality of r]c, by Fact 4.2. 

Therefore, we can conclude that is a path of the form s, a 2 , . . . , a m _i, t with TT Tk (a 2 ) = 
A(ct 2 ) = {g 1 } € G \ G n . That is, the allocation 7r Tfc (over the agents in C 1 ) is such that 
img(7r r J = {5f'}Uimg(r/^)\r/^(a m _i). In particular, observe that r/^(a m _i) C G 7r \img(7r r J. 

Let us now come back to the optimal allocation tt for (A,G,uj) w.r.t. w, and let tt 1 
be an (optimal) allocation in one-good(7r). Let A C C 1 be a set of agents with a 2 € A 
such that the set of goods UceA 7rl ( c ) allocated to these agents according to tt 1 is equal to 
UceA^Tkic) \ {§'} U G", where G" CG t \ img(7r r J and |G"| < 1. Note that a set A having 
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Input: An allocation tt for (A, G, uj), and a vector w <G D; 

Assumption: A verifier v is available. Let v(7r) = {v\, v n ); 

1. Let C denote the set of all possible subsets of A; 

2. For each set C G C, 

3. Compute an optimal allocation ttq for (C, img(7r), uj) w.r.t. w; 

4. For each agent i £ A, 

5. i For each set C G C, 

6. | | Let A^.(tt,w) := val(7r c ,(^,w_i)); (=^(7r c ) + Ejec\« Wj(tc)); 

7. | [ Let Aj^fow) := val(7r C \ {i} ,w); (=E je c\{ ! } w i(' r c\{«})); 

8. | Let 6(tt, w) := E C6 C ^"'^ ^' (A^fr, w) - A^tt, w)); 

9. [ Define pf(7r,w) := ^j(7r,w) - ?7j(7r); 

Figure 5: Payment rule p^. 

this property in fact exists: just start with {02} and then add agents from agents(rfc) until 
some c is found with vr 1 (c) C G n \ img(7r Tfe ). 

Consider then tt = ir Tk [A] [+J tt 1 [A 1 \ A] and note that tt is indeed an allocation for 
(v4, G, uj) 1 , because the construction of the set A guarantees that no good allocated ac- 
cording to vr Tfc [yl] can be allocated by tt 1 to agents in [A 1 \ A], and vice- versa. Since tt 1 is 
an optimal allocation for (A, G, uj) 1 w.r.t. w 1 , val(7r 1 ,w 1 ) > val(7f,w 1 ) holds. Thus, by 
construction of 7f , we get val(7r 1 [yl], w 1 ) > val(7f [A], w 1 ) = val(7r rfc [A], w 1 ). 

Finally, let tt' c = ir Tk [C 1 \ A] kj vr 1 [yl] and note that tt' c is an allocation for (C, G, uj, w) 1 . 
Moreover, observe that val(7f^,w 1 ) > val(7r Tfe , w 1 ) > val(ry^) and img(7f^) C G w . For this 
latter, just recall that ai € A is the only agent in C 1 such that u Tk (a2) \ G w 7^ 0. Again, 
this entails that tjq is not optimal w.r.t. w 1 and hence by Fact 4.2 rjc is also not optimal 
for (C, Gx,uj) w.r.t. w. Contradiction. □ 

The result immediately entails the following two corollaries. 

Corollary 4.5. For each optimal allocation tt for (A, G,uj) w.r.t. w and for each setC C A 
of agents, opt((C, img(7r), uj), w) = opt((C, G, uj), w). 

Corollary 4.6. Let tt be an optimal allocation for (A,G,uj) w.r.t. w, and let tt' be any 
allocation for (A,G,uj), hence with val(7r,w) > val(7r',w). Then, for each set C C A of 
agents, opt((C, img(7r), uj), w) > opt((C, img(7r / ), uj), w). 

4.2 The Design of a Truthful Mechanism 

With the above notation and results in place, we can now discuss the payment rule p^ that 
is illustrated in Figure 5: We are given an allocation tt that selects some goods img(7r) C G 
for the agents in A, plus a vector w € D. Moreover, we assume the existence of a verifier 
computing the vector v(tt) = (v\,...,v n ). 

In the first three steps, the payment rule associates an optimal allocation ttq for 
(C, img(7r), uj) w.r.t. w with each set C € C of agents, where C is the powerset of A, i.e., 
the set of all possible subsets of agents. Then, for each agent i G A and for each set C G C, 
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we define two terms, namely A^^ir, w) and A^(7r,w), which evaluate the allocations ttq 
and 7Tc\{i} under the assumption that agent types are (t>j,w_j) and w, respectively. These 
terms will play a role in the definition of the value £j(7r, w) at step 8. In particular, we 
observe that the definition of this value is reminiscent of the definition of the Shapley value, 
as it considers the marginal contribution of each possible set C summed up in a weighted 
manner w.r.t. its size. 6 Finally, the payment p|(7r,w) is defined at step 9 as the difference 
between ^(7r,w) and Vi(i:). 

Note that the idea underlying the definition of is that, after verification is performed, 
the utility function will precisely coincide with the "bonus" £j(-7r,w), hence sharing the 
spirit 7 of the approach by Nisan and Ronen (2001). Indeed, the following is immediate. 

Lemma 4.7. For each allocation ir for (A,G,u), for each vector w € D, and for each 
agent i G A, it holds that iij(-7r,w) = £j(7r,w). 

By exploiting this characterization, we can now show the first crucial result on the pay- 
ment rule p^, i.e., that the mechanism (A, p^) — where A is any arbitrary optimal allocation 
algorithm — is truthful. 

Theorem 4.8 (truthfulness). Let A be any optimal allocation algorithm. Then, the mech- 
anism with verification (A, p^) is truthful. 

Proof. We have to show that, for each agent i G A, and reported type vector d, 
the following holds: m(A(ti, d_j), (ti, d_j)) > ^(^(d^d); hence, by Lemma 4.7, that 
Zi(A(ti, d_i), (U, d_i)) > £i(A(d), d). 

Consider the construction reported in Figure 5 for the two cases of w = d and w = 
(ti,d-i), and let ir = A(d) and it' = A(ti,d-i) be the corresponding allocations (optimal 
w.r.t. d and (ij,d_j), respectively) received as input by the payment rule in Figure 5. For 
any set C G C of agents, let ire (resp., tt' c ) be the allocation computed at step 3. We show 
that the following two properties hold, for each set of agents C € C: 

(A) A^.fy, (U, d_i)) > Ai .(7r, (b u d_0), and 

(B) A2 ji ( 7 r',(t i ,d_ i )) = A2 )i (7r,(ft i ,d_ i )). 

In order to prove (A), observe that by step 6, Ag^ir', (ti, d_j)) = v^tt'q) + 
YljeC\{i} djWc) = U(^c) + J2jeC\{i} djWc)i because in this case i reports the actual private 
type U, which is equal to the verified one. Now, recall that tt' c is an optimal allocation 
for (C, img(7r / ), oj) w.r.t. (ij,d_j), and it' = A(ti,d-i) is an optimal allocation for (A,G,uj) 
w.r.t. (tj,d_j). Thus, by Corollary 4.5, 

Wc)+ J2 d j (TT' C )=VZl(TT' C ,(t i ,d- i )) = OVt({C,G,00),(t i ,d-i)). (1) 

jec\{i} 

Similarly, A^^tt, (6j,d_j)) = Vi(irc) + YljeC\{i} dj(nc)- I n this case, observe that the re- 
ported type of i is b{, which is different from ti. Also, ttq is an allocation for (C, img(7r), oo), 

6. The reader that is not familiar with this solution concept is referred to the introductory part of Section 5, 
where the Shapley value is formally defined. 

7. In fact, the peculiar form of £i(-7r,w) does not fit the general schema by Nisan and Ronen (2001). 
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hence it allocates goods in img(7r), for which the true type is revealed in v(tt). Thus, we 
may compute A^.(vr, (6;,d_j)) = Vi(ir c ) + Ej G c\{;} d ji^c) = U(n c ) + Y, je c\{i} d j(^c)- 

In order to conclude, let us note that ttq is an allocation for (C,G,oj), though it is not 
necessarily optimal w.r.t. (ij,d_.;). Thus, by using Equation 1, U(w' c ) + J2jeC\{i} d jWc) = 
opt((C,G,uj}, (tj,d_j)) > ti(ir c ) + J2jec\{i} d j(' K c)- Tnis shows that (A) holds. 

Let us now focus on (B). By step 7, we preliminary observe that we have 
Ag |i (7r',(t i ,d_ i )) = 'E j eC\{i} d j(. 7T 'c\{i}) and A e,i(^> ^ d -*)) = £jeC\« d i^C\{i})- Then, 
recall that ^c\{i} ls an optimal allocation for (C \ {i}, img(7r), oj) w.r.t. (ij,d_j) and 
7T = A(bi, d-i) is an optimal allocation for (A, G, oj) w.r.t. (hi, d_j). Thus, by Corollary 4.5, 
and because i's evaluation is immaterial here, we get (B) as follows: X^jec\{i} d 3^'c\{i\) = 
opt((C \ {i}, G,uj), (*i,d_i)) = opt«C \ {i}, G,u), (6i,d_i)) = Ejec\{i} ^(^{i})- □ 

In addition to truthfulness, it suddenly emerges that the payment rule is indifferent 
w.r.t. deviations from the actual values (possibly, cheats) on goods that do not occur in the 
allocation being selected. We have already observed that this property is relevant in our 
motivating scenario, where payments should be made only with respect to certified goods 
(as evaluated by a third-party agency). Now, we state it in formal terms. 

Theorem 4.9 (implementability). For each allocation ir for (A,G,co) and for each agent 
i € A, it holds that p\ (tt, w) = p\ (it, w'), for each pair w, w' G D of vectors that differ only 
outside img(7r). 

Proof. It suffices to observe that, in the algorithm in Figure 5, optimal allocations are 
restricted over the set img(7r) at step 3. Thus, the payment rule is completely indifferent 
w.r.t. agents' evaluations of the goods outside img(7r). □ 

Moreover, it can be noticed that payments do not depend on possible discrepancies 
between declared and verified values, as shown below. 

Theorem 4.10 (no punishment). For each agent i £ A, for each allocation ir for 
(A,G,ui), and for each type vector w £ D, it holds that pf(ir, w) = pf(ir, (U, w_j)). 

Proof. Recall that, in the algorithm in Figure 5, only goods in img(7r) are considered, and 
observe that the payment for agent i depends only on her/his verified type, rather than on 
the declared one. □ 

4.3 Further Properties of Truthful Strategies 

Let us now analyze some relevant properties that hold on whenever agents choose their 
dominant strategy of truthfully reporting their private types. The first property is a useful 
characterization for the utility of the agents. 

Theorem 4.11. For each optimal allocation tt for (A,G,uj) w.r.t. t, and for each agent 
i £ A, it holds that: 

Ui(n, t) = J2 ~ ~ ( opt«C, G, co), t) - opt«C \ {*}, G,u), t) ) . 
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Proof. By Lemma 4.7, we know that Ui(n, t) = £j(7r, t). Then, for each set C G C of agents, 
and for each agent i E A, consider the expressions A^ ^ir, t) and ^tt, t) defined at step 6 
and step 7, respectively, of the mechanism in Figure 5. Note that A^(7r,t) = ti(irc) + 

EjeCVW^e) = val (^c) and A^(vr,t) = EjeC\{i} *i( w C\{*}) = val K:\m)' where ^ 
and 7r c \{j} are optimal allocations for (C, img(7r), u) w.r.t. t and for (C \ {i}, img(7r), uj) 
w.r.t. t, respectively Thus, A^(7r,t) = opt((C, img(7r), lj), t) and A^^tt, t) = opt((C \ 
{i}, img(7r),a;),t). It follows that: 

t) = E (l " 4 ' ~ ~ (WW* im sW' *) - WW \ «' im sM' *)) ' ( 2 ) 

cec 

Recall now by Corollary 4.5 that, for each optimal allocation ir for (.4, G, ir) w.r.t. w 
and for each set C G C of agents, opt((C, img(7r), oj), w) = opt((C, G, co), w). Therefore, 

^(Tr, t) = opt((C, G,u),i) and A^ ^(7r, t) = opt((C \ {i}, G,u),i). By using these equali- 
ties, the result follows from Equation 2. □ 

Note that in the above expression, agents' utilities are completely independent of the 
particular optimal allocation ir. Therefore, in every optimal allocation, every agent gets 
precisely the same utility. 

Corollary 4.12. Let it and ir' be two optimal allocations for (A,G,uj) w.r.t. t. Then, 
Ui(jr,t) = Ui(ir',t) holds, for each i G A. 

Example 4.13. Consider the allocation scenario Sr = (1Z,G,3), where G = {pi, —,p&}, 
associated with the research structure R in Example 2.1. Assume that researchers declare 
their true types t in the ANVUR evaluation, and consider the optimal allocation tp* shown 
in Figure 1(11). Then, we have: 

u ri (r,t) = ±(opt(({n,r 2 },G,3),t) -opt«{r 2 },G,3),t))+ 
±(opt«{n}, G, 3), t) - opt(({}, G, 3), t))+ 
!(opt«{r 2 }, G, 3), t) - o P t«{r 2 }, G, 3), t) = 
±(51 - 26) + ±(26 - 0) + ±(26 - 26) = f . 

In particular, note that opt(({ri}, G, 3), t)) = 26, as we can allocate p±, p±, and p§ to 
r±, if (s)he where the only researcher in the structure. 

Similarly, we get u r2 (tp*,t) = ^±. That is, the two researchers will share precisely one 
half of the total score of their structure, based on our payment scheme. In fact, by looking 
at the allocation ip* in Figure 1(11), one might naively suppose that r 2 contributed more 
than n. However, this is only due to the specific allocation considered, and not to the actual 
values of the products of the two authors. For instance, p§ is allocated to r 2 but it was 
produced by r±, as well. Indeed, the fairness of the utility values resulting from our payment 
rule suddenly appears when considering the alternative allocation ip* in Figure 1(11), which 
is symmetric w.r.t. ip* and where it seems that r\ contributes more than r 2 : As a matter 
of fact, the two researchers are completely interchangeable over optimal allocations, and 
this is correctly reflected by our payment scheme. In particular, from Corollary 4.12, the 
researchers are indifferent w.r.t. the specific optimal allocation being selected, and hence in 
this case they equally divide all the available score between themselves. < 
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We conclude by pointing out a further important property of the mechanism. 

Corollary 4.14 (individual-rationality). Let A be any optimal allocation algorithm. 
Then, the mechanism with verification (A, p£) is individually-rational. 

Proof. Notice that opt((C, G, u), t) - opt((C \ {i},G,u),t) > 0, holds for each C <^ A and 
agent i G A. Then, by Theorem 4.11, Ui(ir, t) > holds, for each agent i G A. □ 

5. A Coalitional Game Theory Viewpoint 

A coalitional game can be modeled as a pair Q = (N,<p), where N = {l,...,n} is a finite 
set of agents, and <p is a function associating with each coalition C C iV a real-value 
93(C) G R, with </?({}) = 0, which is meant to encode the worth that agents in C obtain 
by collaborating with each other. The function ip is supermodular (resp., submodular) if 
ip(R U T) + ip(R n T) > ip(R) + ip(T) (resp., ip(R U T) + <^(i? n T) < <p(R) + <p(T)) holds, 
for each pair of coalitions R,T C AT. 

A fundamental problem for coalitional games is to single out the most desirable out- 
comes, usually called solution concepts, in terms of appropriate notions of worth distribu- 
tions, i.e., of vectors of payoffs x = (x±, x n ) G W 1 such that Y2ieN x i = l f(^)- This 
question was studied in economics and game theory with the aim of providing arguments 
and counterarguments about why such proposals are reasonable mathematical renderings 
of the intuitive concepts of fairness and stability. For further background on coalitional 
games, the reader is referred to, e.g., (Osborne & Rubinstein, 1994). 

Here, we consider the Shapley value of Q = (N,tp), which is a well-known solution 
concept such that: 

UG) = E (|iY| ~ l ^ ! |! |C| ~ 1)! (^(g) - <P(C \ {*})), for each i G N. 

CCN ' 

Indeed, we shall show that the mechanism defined in Section 4 has a nice interpretation in 
terms of the Shapley value of some suitable-defined coalitional games. The correspondence 
will be exploited to prove further properties of our mechanism. 

5.1 The Shapley Value of Allocation Games 

We consider two coalitional games defined on top of an allocation problem. 

Definition 5.1. Given the tuple S = {A,G,u) and a vector w of agent types, we define 
(?S\v = (A mar gsw) an d = (-^; bests iW ) as the coalitional games such, that for each 
set C C A of agents, 

• marg (AGA))w (C) = opt(5, w) - opt ((.A \ C, G, u), w); and, 

• bests iW (C) = opt((C, G,uj),mv). □ 

Note that marg SjW (C) is the marginal contribution of C to opt (5, w). Instead, bests iW (C) 
is the best contribution of C (w.r.t. w), computed assuming that agents in C were the only 
agents in the allocation problem. In particular, the game has already been considered 
by Moulin (1992), precisely in the setting of fair division for allocation problems. There, it 
is shown that the cost function associated with Gi es L is submodular. 
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Proposition 5.2 (Moulin (1992)). The function bests ,w is submodular. 

Then, the (dual) analogous for marg s w can be shown easily. 
Theorem 5.3. The function marg s w is supermodular. 

Proof. Let S = {A, G, w) be the given structure, and w be a vector of types. The result 
just follows by noticing that marg Sw (C) = opt((.A, G,u), w) — opt ((^4 \ C, G, uj), w) = 
opt((.A, G,u),w) — best s,-w{A\C), for each set of agents C C A. That is, bests jW (C) = 
opt((.A,G,w),w)-marg S)W (.A\C). Thus, if best 5iW (i?UT)+best 5iW ( J RnT) < best 5iW (i?)+ 
best 5iW (T) holds Vi?,T C jV, we have that marg 5w ( v 4\ (RUT)) + marg 5w (.A\ (RnT)) > 
marg 5 w (.A\i?)+marg 5)W ( > A\r) holds as well, VR,T C N. Eventually, by letting R' = A\R 
and V = A\T, we get'marg 5jW (i? / n T') + marg 5 w (i?' U T')) > marg S)W (#) +marg 5w (r / ), 
for each \/R',T' C iV. That is, marg 5)W is supermodular. □ 

As a second relevant property, we next observe that the payment rules in Section 4 
coincide, at the equilibrium t where agents truthfully report their types, with the Shapley 
value of the game associated with S. The result follows by comparing the utility 
function as in Theorem 4.11 with the expression for the Shapley value of the coalitional 
game 0$%- Moreover, we show that the same result can be established for the "dual" game 
Gg a ^ 3 , so that the Shapley values of the two games are identical — for similar correspondences 
between Shapley values of different games, see also the works by Maniquet (2003) and Kalai 
and Samet (1983). 

Theorem 5.4. For each optimal allocation ir for S = (A,G,oj) w.r.t. t, and for each agent 
ieA, it holds that 14(71-, t) = &(7r,t) = MGs$) = &(0s,D- 

Proof. By comparing the utility function as in Theorem 4.11 with the expression for the 
Shapley value of the coalitional game Qg 8 ^ associating with each coalition C of agents the 
worth opt((C, G, oj),t), we immediately get that, for each optimal allocation ir for S w.r.t. t, 
and for each agent i G A, it holds that 14(71", t) = £j(7r,t) = (f>i(Q b st)- 

In order to conclude the proof, we show that for each agent i £ A, (pi(Q^ 9 ) = <i>i(Gst) 
holds. To this end, first note that these Shapley values can be written as follows: 

- <M^s,t ) — 2^ccA,iec \a\\ J e> anQ 

A.fG^t) - V (l4|-|C|)!(|e|-l)! T , 

where T' c = margg t (C) — marg^^C \ {i}) and Tq = opt((C, G, u), t) — opt ((C \ {i}, G, lj), t). 
Then, we claim that: 

(1) for each set C C A of agents with i G C, the set C = (A\C) U {i} is such that T' c = Tq, 
and 

(2) for each set C C A of agents with i G C, the set C = (A\C)U {i} is such that T' c = T c ~. 

(1) Let C C A such that i E C, and observe that T' c = marg st (C) — marg 5t (C \ {i}) = 
(opt (5, t) - opt((^4\C, G, u),t)) - (opt (5, t) - opt((^\ (C \ {»}),' C?, w>, t)) = opt((^ \{C\ 
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{i}),G,u),_t) -opt((A\C,G,u),t) = opt(((A\C)U{i}),G,u),t) - opt{{A \ C, G,u),t). 
Thus, let C = (A \ C) U and note that T' c = T c . 

(2) Let C C i such that i E C, and observe that = opt((C, G, cu), t) — opt((C \ 
{i},G,w),t) = (opt(5,t) - opt«C \ {i},G?,o;>,t)) - (opt(S,t) - opt«C,G»,t)) = 
marg S)t ((^ \ C) U {i}) - marg 5t (.4 \ C). Thus, let C = (.4 \ C) U {i} and note that T' c = T £ . 

As (1) and (2) hold, and given the two expressions for faiG™™) and 4>i(Gst )> we conclude 
that the two values coincide. □ 

5.2 Fairness and Budget-Balancedness 

Now that we have established a precise correspondence between our mechanism and the 
Shapley value of its associated allocation games, we can show further desirable proper- 
ties of p^. In fact, we exploit the following well-known properties (see, e.g., Osborne &; 
Rubinstein, 1994; Young, 1985) of the Shapley value of any game Q = (N, 92): 

(I) EieNMG) = <Pm 

(II) If (p is supermodular (resp., submodular) , then X^ec'M^) — ^(C) (resp., Yliec&iG) — 
V (C)). 

(Ill) If G' = (N, ip'} is a game such that ip'(C) > 99(C), for each C C N, then > 
for each agent i € A. 

Our first result is to show that bests,t(C) anci mar gst(^) provide an upper and a lower 
bound, respectively, to the sum of the utility functions over any set C of agents. This is 
particularly useful whenever we have to reason in terms of fairness for groups of agents, 
rather than just in terms of the utility of singletons. 

For instance, in the motivating scenario of Section 2, a crucial question concerns how 
the structure funding after the ANVUR evaluation (e.g., the research funds for a Univer- 
sity) should be shared among its sub-structures (e.g., the Departments). The result below 
shows that, with our mechanism, any sub-structure will never get less than its marginal 
contribution, neither more than the maximum contribution it can achieve if its members 
were alone in the structure. In particular, any closed group of researchers (e.g., any depart- 
ment without collaborations with other departments, or any research group without further 
coauthors in the same structure) will share precisely the total value attributed by ANVUR 
to its research products. Such a score is desirable for agents, and it is perceived as a fair 
distribution (see the work by Moulin (1992), for more on the fairness of the Shapley value). 

Theorem 5.5. Let it be an optimal allocation for S = (A,G,co) w.r.t. t. Then, for each 
set C C A of agents, bests,t(C) > zCjgc u i(. n i *) — mar gst(^)- 

Proof. By Theorem 5.4, we know that Uj(7r,t) = <j)i(Gst) = ^(^sTO' f° r each agent i G A 
and optimal allocation it. Then, we can simply recall that the function marg 5t (resp., 
bests,t) associated with the game G^C (resp., Ggt) is supermodular (resp., submodu- 
lar) by Theorem 5.3 (resp., Proposition 5.2). Hence, the result follows as YlieC ^(^j *) = 
E, e c W$) = £ ie c HG m sT) and ^ Property (II). ' □ 
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Our second result pertains the budget-balance property of the mechanisms. Again, the 
correspondence with the Shapley value is crucial to establish the result. 

Theorem 5.6. Let tt be an optimal allocation for S = (A,G,uj) w.r.t. t. Then, it holds 
that £ ie ^pf(7r,t) = 0. 

Proof. By Theorem 5.4, we know that Uj(-7r, t) = </>i(Gst)> for each agent i G A and optimal 
allocation tt, where <t>i(Gst) * s t ne Shapley value of Qg^. By property (I) of the Shapley 
value, we know that £ ie i&(0§?) = best S)t (.4). Thus, £ ie/t i*i(7r,t) = £ i6>l &(0§?) = 
opt((A,G,uj),t). It follows that oj)t((A,G,oj),t) = £ ie _4^(7r) ~ Y.ieAPii 71 ^)^ ^ defini- 
tion of the utility. Hence, YlieAP^ 71 "'*) = opt((.4, G, u;),t) — val(7r,t) = 0, as tt is indeed 
an optimal allocation w.r.t. t (and, hence, w.r.t. verified types). □ 

Corollary 5.7 (budget-balance). Let A be any optimal allocation algorithm. Then, the 
mechanism with verification (A, p^) is budget-balanced. 

Finally, we complete the picture of our analysis by proving the strong fairness property 
of the proposed payment rule p^: In words, the best outcome for every agent is always 
determined by a (global) optimal allocation. Moreover, from Corollary 4.12, any agent 
is indifferent about the specific optimal allocation being considered. That is, any chosen 
optimal allocation leads to the best results for all agents. 

Lemma 5.8. Let tt and tt' be two allocations for S = {A, G,uj) such that tt is optimal, and 
hence val(7r,t) > val(7r',t). Then, Uj(7r, t) > Uj(7r',t) holds, for each i G A. Moreover, if 
tt' is not optimal, there exists some agent i G A such that Ui(ir,t) > Uj(7r',t). 

Proof. For any allocation tt, consider the coalitional game Q n = (A,v n ) such that v n (C) = 
opt((C, img(7f), u), t), for each C C A. By looking at the expression of the Shapley value 
for G 77 , it is easy to check that Ui{rt,t) = 0j(^ 7r ) (just use the same reasoning leading 
to Equation 2 in the proof of Theorem 4.11). Assume now that tt' is an allocation with 
val(-7r,t) > val(7r / ,t), and consider the value v n (C) = opt((C, img(7r'), uj), t), for each 
C C A. By Corollary 4.6, we have that v w (C) > v n (C), for each C C A. Then, we derive 
that Ui(TT,t) = 4>i(G n ) > 4>i(Q n ) = Ui(7r',t) for every i G A, because of property (III) of the 
Shapley value. 

Now assume that tt' is not optimal, and thus val(7r,t) > val(7r',t). Therefore, for the 
grand-coalition A, we have v n (A) > v w (A). Because of property (I) of the Shapley value, 
only (and all) the total value v n (A) is distributed to agents. It follows that there exists 
some agent i G A such that Ui(TT,t) = </>j(^ 7r ) > 4>i(G w ) = Ui(iT',t). □ 

Because, truthful declarations lead to optimal allocations, the desired fairness property 
is immediately entailed by the previous lemma. 

Theorem 5.9 (Fairness). Let A be any optimal allocation algorithm. Then, for any agent 
i G A and any allocation tt, Ui(A(t),t) > Uj(7r,t). 

Corollary 5.10 (Pareto-efficiency and envy-freeness). Let A be any optimal allocation 
algorithm. Then, the mechanism with verification (A,p^) is Pareto efficient and envy-free. 

Note that the above fairness condition guarantees much more than classical Pareto effi- 
ciency and envy-freeness, because it entails that the mechanism leads to a unique evaluation, 
independently of the chosen optimal allocation. In particular, the Pareto set is a singleton. 
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6. Complexity Issues 

In this section, we shall reconsider our mechanism with verification from a computational 
perspective. Note first that computing an optimal allocation on the basis of the reported 
types is an easy task, which can be carried out via adaptations of classical matching algo- 
rithms. Indeed, in the light of Fact 4.2, computing an optimal allocation for (A,G,u,w) 
reduces to computing an optimal allocation for (A^G, 1) w.r.t. w 1 , which is a scenario 
where each agent can be allocated one good at most. This is equivalent to find a matching 
of maximum weight over a complete bipartite graph over the set of disjoint nodes A 1 and 
G, and where edge weights are encoded via the function w 1 . This task is well-known to be 
feasible in polynomial time (e.g., Schrijver, 2003). 

6.1 Hardness Result 

Despite optimal allocations can be computed in polynomial time, our mechanism is not 
computationally-efficient, since payments are unlikely to be computable in polynomial time. 
Indeed, we next show that this computation problem is complete for the complexity class 
#P (see Papadimitriou, 1993). 

For the sake of completeness, we recall here that a counting Turing machine is a standard 
nondeterministic Turing machine with an auxiliary output device that prints in binary 
notation the number of accepting computations induced by the input. It has (worst-case) 
time complexity f(n) if the longest accepting computation induced by the set of all inputs 
of size n takes fin) steps. Then, #P is the class of all functions that can be computed 
by counting Turing machines of polynomial time complexity. A prototypical #P- complete 
problem is to count the number of truth variable assignments that satisfy a Boolean formula. 
Of course, NPC^P, and a polynomial-time algorithm for solving a #P-complete problem 
would imply P = NP. 

Theorem 6.1. Computing the Shapley value of coalitional games associated with allocation 
problems (as in Definition 5.1) is #P -complete. 

Proof. The problem belongs to #P, because computing the Shapley value is known to be fea- 
sible in #P for any class of coalitional games with polynomial-time value/cost functions (c.f. 
Deng & Papadimitriou, 1994). To show that it is #P-hard, we exhibit a reduction from the 
following problem: Let G = (AUB,E) be a bipartite graph with \ A\ = \B\ = n, E C Ax B, 
and \E\ = m > n. Recall that a matching is a set E' C E of edges such that for each pair 
of distinct edges (a, b) and (a', b') in E', a ^ a' and 6/6' hold. The matching E' is perfect 
if \E'\ = n. The problem of counting the number of perfect matchings in such bipartite 
graphs is #P-complete (Valiant, 1979a). 

Given a graph G = (A(JB,E) as above and a constant k > 1 (which we shall fix below), 
we build in polynomial-time a tuple S(G) = (A, G,u) and a type vector t such that: 

(1) A = {a} U U( a 6)es{( a ' k) 1 ! ■•■> ( a ' k) fc }> i- e -> agents are one-to-one associated with k 
distinct clones of each edge (a, b) € E, plus a distinguished node a. Note that \A\ > n, 
because in the considered bipartite graphs m > n holds; 

(2) G = {g a } U A U B, i.e., goods correspond to nodes, plus a distinguished good g a ; 
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(3) w is the function such that oj(a) = 1, and tj((a, b) 1 ) = 2, for each (a, b) <G A and 
i £ {1, ...,£;}; 

(4) Types are as follows. For each (a, b) 1 £ A, i( a ,6)»(o) = 2, t( a ^ h y(b) = 2, t^ a ^y{g a ) = 1, 
t^ b y(x) = 0, Mx e (A U B) \ {a, b}. Moreover, t a (g a ) = 1, t a (x') = 0, Mx' € (A U B). 

Let us now fix some notations. For any set E' Q E oi edges, let match(£' / ) denote the 
size of the largest set E" C E' of edges that is a matching. For any set C C A \ {a} of 
agents, let A(C) = {a \ (a, 6)* <G C} and B(C) = {6 | (a, by € C}. Finally, we say that 
C C i \ {a} is tight if it does not contain two agents of the form (a, b) 1 and (a, b) 1 , with 
i 7^ j, i.e., associated with the same edge of G. 

Observe that, for each set C C A \ {a} of agents, 

,m r i ^ \ , \ „ , f 1 if C is tight, and \C\ = A(C) = B(C) 

opt«CU{a},G,w),t) -opt((C,G,w),t) = | Q otherwis & e ' '' ^ U (3) 

Indeed, if tt' c is an optimal allocation for (C U {a}, G, w.r.t. t, then we always have that 
val(7i£,t) = 2 x |A(C)| + 2 x |B(C)| + 1. Instead, if tt c is an optimal allocation for (C,G,uj} 
w.r.t. t, then we have 



val(7r c ) 



2 x |A(C)| + 2 x |B(C)| if C is tight, and \C\ = A(C) = B(C) 

2 x |A(C)| +2 x |B(C)| + 1 otherwise 



By exploiting Equation 3, we can now express the Shapley value of the game Ggfo t for 
agent a in a convenient way. Let Xh denote the number of sets C C ^l\{a} of agents which 
are tight and such that \C\ = \k(C)\ = \B(C)\ = h, and let X = 1. Then, 

A rc- ^ _ ' v 1 (l^l-^- 1 )'^)! x U) 
Mys(G),t) - 2^ rjT] Xh - ^ 

In particular, let us now focus on the coefficient X^. Denote by the number of matchings 
in G whose cardinality is h. By construction of S(G) it is immediate to check that for each 
matching of cardinality h in G, there are precisely k h sets of agents C C A \ {a} that are 
tight and such that \C\ = |A(C)| = |B(C)| = h. Thus, we can rewrite the above expression: 

1-41-1 

Mo b s %),t) = E x y ») x with z h = (lAh Ui )m - ( 5 ) 

h=0 

For an expression as the one above, given the value of </>a(Gs(G) t)> ^ ^ s known that under 
certain circumstances we can reconstruct in polynomial time the value of each single term 
of the form Zh x Yh (see Fact 6 in the work by Valiant (1979b)): We need the existence of an 
integer constant A > 2 such that, for each h G {0, \A\ — 1}, 2/, x Y/, < A, and k > A 2 . 
In our case, it can be noticed that, for each h G {0, |^4| — 1}, Z/, x 7/, < 1 holds, as 
Y h < \A\\/({h)\(\A\ - h)\). Thus, for k = 9, we have that, given the value of &a(Q b s %) t ), we 
can compute in polynomial time all such terms. In particular, we can compute in polynomial 
time the term associated to h = \A\ = \B\ = n, where recall that \A\ > n. This term has 
the form Z n x Y n , with Y n being the number of perfect matchings in G. Thus, by putting it 
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Input: An allocation ir for (A, G, uj), a vector w G D, and an integer m > 0; 

Assumption: A verifier v is available. Let v(7r) = (v\, v n ); 

1. Generate a set C of m subsets of .4, and add to them the grand-coalition A; 

2. For each set C G C, 

3. | Compute an optimal allocation ttq for (C, img(7r),u;) w.r.t. w; 

4. j Compute an optimal allocation ^c\{i} f° r (C \ W> im g( 7r )) a; ) w.r.t. w; 

5. For each agent i G A, 

6. Compute £j(7r, w) as in Figure 5 (steps 4 — 8), with C := C; 

7. Repeat 9(log(l/<5)) times steps 1, 2, and 5, and 

8. Let £(-7r,w) be the component-wise median vector of these vectors £(7r,w); 

9. Define p\ (it, w) := ^(tt, w) - v^tt); 

Figure 6: Payment rule p^. 

all together and since Z n can be computed in polynomial time (as the size of the numbers 
n and \A\ are logarithmic w.r.t. the size of G), the number of perfect matchings in bipartite 
graphs can be counted in polynomial time too, which concludes the proof. □ 

By Lemma 4.7 and Theorem 5.4, the following is immediate. 

Corollary 6.2. Computing the payments as given by the rule p^ is j^V-complete. 

6.2 A Fully Polynomial-Time Randomized Approximation Scheme 

An approach to circumvent the intractability of the Shapley value is based on approximation: 
For a game Q = (N,tp), a vector 4> is an e- approximation of the Shapley value if \4>% — < 
e x (f>i(Q) holds, for each i G N. 

Recently, a sampling method conceived by Bachrach, Markakis, Resnick, Procaccia, 
Rosenschein, and Saberi (2010) for the special class of simple coalitional games has been 
extended to deal with arbitrary games that are supermodular and monotone 8 (Liben-Nowell, 
Sharp, Wexler, & Woods, 2011), under the assumption that the value y>(R) can be computed 
by an oracle having unitary cost, for each R C N. The result is that, for any e > and 
5 > 0, it is possible to compute in time poly(7V, 1/e, log(l/5)) a vector (f> that is an e- 
approximation of the Shapley value with probability of failure at most S. A method with 
this properties is called a fully polynomial-time randomized approximation scheme. 

Next, we propose a payment rule p^ that is founded on the sampling strategy described 
in the work by Liben-Nowell et al. (2011). The payment rule, reported in Figure 6, samples 
m subsets of A storing them in C, and then computes the value £(7r, w) as in Figure 5, but 
with C playing the role of the power-set C. Eventually, the process is repeated 0(log(l/c))) 
times, and the component- wise median vector of all such payments is computed. Finally, 
at step 9, the usual compensation and bonus approach is implemented. 

Interestingly, though the new rule p^ is based on randomization, the following properties 
still hold (always, not just as expected outcomes). 

8. Monotonicity of Q means that ip(R) > ip(T), VT C RC N. 
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Theorem 6.3. Let A be any optimal allocation algorithm. Then, the mechanism with 
verification (A,pt) is truthful and individually-rational. 

Proof. The result follows by inspecting the proofs for rule in Section 4. Indeed, it 
can be immediately checked that those proofs do not depend on the specific subset of 
coalitions C, and thus they smoothly apply if any set of coalitions C is used as in Figure 6, 
instead of all possible subsets of A. Note in particular that, despite the payment rule is 
based on randomization, the resulting mechanism is always truthful: just look at the proof 
of Theorem 4.8, and notice that properties (A) and (B) are precisely those guaranteeing 
truthfulness, and that these properties hold for each given coalition C. Therefore, they still 
hold for any subset of coalitions randomly chosen by the mechanism. □ 

For continuing with a deeper analysis of the payment rule p^, we need to point out a 
relationship between utility values and approximations of the Shapley value. 

Lemma 6.4. Let A = {1, |v4|} ; and let m = 0(|^,| 2 /e 2 ). Then, for each optimal allo- 
cation 7r for S w.r.t. t, the vector (u 1 ^e(7r, t), ...,u^ ^(ir,t)) is in expectation the Shapley 
value of Gg a ™ (and Ggf), of which it is an e- approximation, with probability 1 — 5. 

Proof. By exploiting the same line of reasoning as in the proofs in Section 4 for p^, we can 
see that £i(7r,t) (at step 6 of the algorithm in Figure 6) can be rewritten as follows: 

t) = £ — = tP ' " ( mar ^t(C) - marg 5it (C \ {<})) . 
cec 

Now, recall that the game Qg a ^ g = (»4,marg st ) is supermodular by Theorem 5.3. More- 
over, Qg a ^ 9 is clearly monotone. Thus, by Theorem 4 in the work by Liben-Nowell et al. 
(2011), we derive the result in the statement, but for the fixed value of 5 = 1/4. Steps 7 
and 8 just serve to amplify the probability (c.f. Liben-Nowell et al., 2011), and to get a 
fully polynomial-time randomized approximation scheme. □ 

As the expected utility profile coincides with the Shapley value, it is easy to see that p^ 
enjoys in expectation all the properties of p^ (e.g., Pareto-efficiency and envy-freeness). We 
thus focus in this section on those properties that can be shown to hold always, i.e., not just 
in expectation. With this respect, note that in the approach by Liben-Nowell et al. (2011), 
a final normalization step is carried out to preserve the budget balance. Unfortunately, this 
way truthfulness might be lost, hence we did not include such a normalization procedure in 
the above payment rule. As a consequence, the mechanism p^ does not guarantee budget- 
balancedness and Pareto-efficiency. However, we can still have approximate counterparts 
for Theorem 5.5 and Theorem 5.6. 

Theorem 6.5. Let it be an optimal allocation for S w.r.t. t. Let m = 0(|^l| 2 /e 2 ). Then, 
with probability 1 — 5, 

• (1 + e) x bests )t (C) > EieC u *,p«( 7r ' t ) > i 1 ~ £ ) x mar gs,t( c )> for each C C A; 

• ex val(vr,t) > 52 ieA pl(ir, t) > -e x val(vr,t). 
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Proof. Here, just observe that, in the light of Lemma 6.4 and Theorem 5.4, for each set 
C C A, we have (1 - e) x J] ieC (vr, t) < Y, i& c t) < (1 + e) x Y, ie c u i,i>d^, t). 

The result then follows by substituting such bounds in Theorem 5.5 and Theorem 5.6, 
respectively, with simple algebraic manipulations. □ 

Finally, we propose a further randomized mechanism that is able to guarantee both eco- 
nomic efficiency and budget-balancedness. The price to be paid is however that truthfulness 
holds in expectation only. The mechanism is based on a payment rule p^. 

Theorem 6.6. Let A be any optimal allocation algorithm. Then, the (randomized) mecha- 
nism with verification (A, p^) is truthful in expectation. Moreover, (at the truthful equilib- 
rium) it is efficient, individually-rational and budget-balanced. 

Proof. The payment rule p^ follows the steps in Figure 6, with minor modifications at 
step 8 and step 9: First, at step 8, whenever we compute the median value £i(ir, w) 
for agent i, we also compute the corresponding value ^(tt, v(7r)) (evaluated on the re- 
vealed types rather than on the reported ones). Then, we define a normalization factor 
R = opt((^l, img(7r),a;), v(7r))/(^ ie _ 4 |j(7r, v(7r))), so that, at step 9, pf(7r,w) is eventually 
returned as Vi(ir) — £i(7r,w) x R. 

Concerning truthfulness, we can just note that the expected value of R is 1. Indeed, 
by Lemma 6.4, the expected value of £i(7r,v(7r)) is £i(ir, v(7r)); hence, the sum of all these 
values coincides with opt ((.A, img(7r), w), v(7r)) by the efficiency of the Shapley value (as in 
the proof of Theorem 5.6). Thus, the expected utility of an agent i under the payment rule 
p£ coincides with the (actual, i.e., not in expectation) utility of i under the rule p^. Hence, 
truthfulness in expectation follows by Theorem 6.3. Now, we can just check that, at the 
truthful equilibrium, the maximum social welfare is achieved (equilibrium efficiency) and 

Y.ieAPii 71 ^) = °P t ((^' im g( 7r )) w ) ) v ( 7r ))~I]i e ^^( 7r ) w ) X R = 0- That is, the mechanism 
is budget-balanced, too. Finally, the mechanism p^ is seen to be individually-rational, by 
exploiting the same line of reasoning as the one used for the mechanism based on p^, since 
the corresponding proof in Section 4 is not affected by the sampling strategy. □ 



7. Related approaches to Mechanisms with Verification 

We next review the main approaches in the literature for mechanisms with verification. 

In the works by Auletta et al. (2009), Penna and Ventre (2009), Krysta and Ventre 
(2010) and Ferrante et al. (2009), the individual welfare of an agent i, given the outcome 
7r and the vector d of reported types, is assumed to be of the following form: 

if i is caught lying 



, , , , f if i is caue 

«i,p(*>d) | ft(7r>d) otherwise 



where Pi(-,-) is a payment that does not depend on the vector t of the true types. 

In these papers, the only information that is assumed to be available at payment time 
is whether the reported type d\ of agent i differs or not from its actual true type ti, so 
that the knowledge of ti is basically immaterial. On the other hand, the specific payment 
scheme adopted punishes those agents that are caught lying. Therefore, while the verifi- 
cation process provides a smaller amount of information than the verification process in 
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our approach, the rules used to discourage strategic behaviors are stronger than ours and 
based on punishing agents. Moreover, the above works assume that agents' misreporting is 
restricted only to certain kinds of lies (e.g., values lower than the corresponding true ones), 
so that a form of "one-sided" verification suffices. 

Recently, the above model of (partial) verification has been extended by Caragiannis 
et al. (2012) to a setting where an agent cheating on her/his type will be identified with 
some probability that may depend on her/his true type, the reported type, or both. The 
payment scheme is exactly the same as the one discussed above and, hence, verification does 
not exploit the knowledge of the actual true type and a punishment approach is still used. 
The main novelty, in addition to the probabilistic verification, is that there is no constraint 
on the type that an agent can report while cheating. 

Finally, a different kind of verification model goes back to the seminal paper by Nisan 
and Ronen (2001), and is actually closer to our "no-punishment" perspective, because an 
agent i can in principle be paid by the mechanism even if i has been caught lying. Given n 
agents, Nisan and Ronen (2001) consider a vector e = (ei, e n ) of "observed" agent types, 
which are completely known after the verification process. Moreover, the individual utility 
of any agent i has the form: 

Ui, p (7T,d) = ei(vr) -pj(7r,d), 

so that the vector e in such a framework plays the same role as the vector of verified 
types in our approach. Note that in some settings it does not make sense to assume that 
the utility of an agent depends on verified/observed types (cf. Penna & Ventre, 2009). 
In our motivating scenario, this is not the the funds received by researchers are 

precisely determined by the verifier (i.e., ANVUR evaluation), here playing ideally the role 
of providing an "objective" utility to the agents or, putting it in more pragmatic terms, an 
utility determined by external constraints — in fact by law. 

A first difference between the work by Nisan and Ronen (2001) and our approach is 
that, in the above model, agents' misreporting is again restricted only to certain kind of 
lies. Another more subtle difference is that our verification process can be defined as a 
good-centric one, because at payment time everything is known about each verified good. 
More precisely, if good g has been verified, then we know everything about its value, that 
is, its actual evaluation ti(g) according to each agent i, even if g is not allocated to i (recall 
that our mechanism is in fact indifferent with respect to alternative allocations). Instead, 
the setting by Nisan and Ronen (2001) can be viewed as an agent-centric one, because the 
true type of each agent i for the goods allocated to % are disclosed by the verification process. 

It is easy to see that a good-centric verification provides more information, in general. On 
the other hand, this additional information turns out to be the crucial feature to overcome 
classical impossibility results, and to meet all desirable properties at once (without using 
any punishing power). Moreover, it is worthwhile noting that good-centric and agent-centric 
verifications have the same power on all classes of problems where U{g) = tj(g), for every 
good g £ G and each pair of agents i,j £ A with positive valuations about g, that is, 
whenever the application at hand is such that the value of a good is an objective property 
and hence, if the good is verified, it is disclosed for all agents at once. For instance, as 
discussed in Section 3, our motivating scenario about the 2012 Italian research assessment 
programme is precisely of this form. 
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8. Conclusion 

In this paper, we have proposed and analyzed mechanisms for fair allocation problems. In 
classical settings, it is well-known that there is no truthful mechanism that can be simulta- 
neously efficient, budget-balanced, and fair. Here, motivated by a real-world problem, we 
have considered mechanisms with verification, where payments to agents can be performed 
after the final outcome is known and verified. In particular, we have proposed a model 
of verification that is able to disclose the true values of allocated goods, in contrast to 
previous approaches in the literature where partial and probabilistic verification have been 
considered. However, the use of this verification power is in fact quite limited because pay- 
ment rules have been designed without punishing in any way those agents that are possibly 
caught lying. The resulting mechanisms have been analyzed by taking into account both 
algorithmic and complexity issues. 

By looking at the proposed framework from an abstract perspective, one may notice 
that it is based on two fundamental ingredients: a base combinatorial problem that deter- 
mines feasible and optimal allocations, and a game-theoretic notion that describes what is 
considered fair, with respect to agents' contributions and expectations. In the application 
domain addressed in the paper, it was natural to consider the weighted matching as the 
basic combinatorial problem and the Shapley value as the game-theoretic solution concept. 
In fact, an interesting avenue of further research is to study different instances of such an 
abstract framework for mechanisms with verification, where other combinatorial problems 
(colorings, coverings, etc.) and different solution concepts (Nucleolus, Banzhaf index, etc.) 
may be more appropriate and best describe the problem at hands. 
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